Lucene search
+L

1 matches found

OSV
OSV
added 2025/03/19 5:36 p.m.21 views

CVE-2025-29925 XWiki allows unregistered users to access private pages information through REST endpoint

XWiki Platform is a generic wiki platform. Prior to 15.10.14, 16.4.6, and 16.10.0-rc-1, protected pages are listed when requesting the REST endpoints /rest/wikis/wikiName/pages even if the user doesn't have view rights on them. It's particularly true if the entire wiki is protected with "Prevent...

8.7CVSS6.5AI score0.00906EPSS
SaveExploits1References7
Rows per page
Query Builder